JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

34.185.138.38

Neutral Activity

Abuse Confidence Score

0% Low Risk

30 reports

22 reporters · latest 2 months ago

ISP: Google LLC
Usage Type: Data Center/Web Hosting/Transit
ASN: AS396982
Hostname(s): 38.138.185.34.bc.googleusercontent.com
Domain Name: google.com
Country: 🇩🇪 Germany
City: Frankfurt am Main, Hesse

ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report Whois

No reports in the last 60 days

34.185.138.38 has been reported 30 times. The most recent report is from 2 months ago.

The full history is preserved below and remains searchable. A 0% score reflects the absence of recent activity, but this is not a guarantee that earlier reports were invalid. Abuse confidence score decays, naturally, over time, when the abusive activity stops.

Abuse Reports

Export reports CSV

Total reports

30 from 22 distinct reporters

First reported

August 26th 2026

Most recent report

2 months ago

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 Zydzy	2026-08-31 11:16:21 UTC · (2 months ago)	Automated attack detected. Server: 95.140.154.181. Jail: nginx-exploit.	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 09:02:47 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 05:02:39.977662 2026] [security2:error] [pid 984:tid 98 ... show more (mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 05:02:39.977662 2026] [security2:error] [pid 984:tid 984] [client 34.185.138.38:37594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.georgegourmet.visionremota.info"] [uri "/www/.git/config"] [unique_id "apKgLxYxYqIVOeSpL2NjwwAAAB8"] show less	Brute-Force Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 08:07:03 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 04:06:58.846869 2026] [security2:error] [pid 15454:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 04:06:58.846869 2026] [security2:error] [pid 15454:tid 15454] [client 34.185.138.38:48224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.southernreader.com"] [uri "/htdocs/.git/config"] [unique_id "apKTIspoe82meNKVJdAQHgAAABQ"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇷 pm33	2026-08-29 08:04:14 UTC · (2 months ago)	Unauthorized connections HTTP 403	Web App Attack
🇺🇸 TPI-Abuse	2026-08-29 05:39:09 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 01:39:05.179665 2026] [security2:error] [pid 16839:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 01:39:05.179665 2026] [security2:error] [pid 16839:tid 16839] [client 34.185.138.38:60096] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "family.amgtr.com"] [uri "/www/.git/config"] [unique_id "apJwec8qIji6EJSWiJoI1QAAAAA"] show less	Brute-Force Bad Web Bot Web App Attack
🇫🇮 YF	2026-08-29 01:30:50 UTC · (2 months ago)	Git config exposure probe	Web App Attack
🇨🇭 Ribeye375	2026-08-28 23:40:35 UTC · (2 months ago)	HIPS nginx-access-errors - Block tcp/http,https	Brute-Force
Anonymous	2026-08-28 21:50:01 UTC · (2 months ago)	suspicious request in access.log	Web App Attack
🇫🇷 Thibault Millant	2026-08-28 19:38:15 UTC · (2 months ago)	34.185.138.38 - - [28/Aug/2026:19:37:55 +0000] "GET /api/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0" ...	Brute-Force Exploited Host SSH
🇫🇷 UnixPrime	2026-08-28 18:27:00 UTC · (2 months ago)	34.185.138.38 - - [28/Aug/2026:20:26:59 +0200] "GET /.git/config HTTP/1.1" 404 14077 "-" "crusader-worker/1.0" 34.185.138.38 - - [28/Aug/2026:20:26:59 +0200] "GET /.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0" ...	Bad Web Bot Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 17:25:52 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:25:43.518001 2026] [security2:error] [pid 18258:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 13:25:43.518001 2026] [security2:error] [pid 18258:tid 18258] [client 34.185.138.38:35266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.matteozacchino.matteozacchino.dev"] [uri "/html/.git/config"] [unique_id "apHEl8AX7S6v8CVF8EgX_AAAACk"] show less	Brute-Force Bad Web Bot Web App Attack
🇨🇦 polycoda	2026-08-28 13:37:35 UTC · (2 months ago)	AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)	Hacking Web App Attack
🇬🇧 consul.to	2026-08-28 13:19:02 UTC · (2 months ago)	Web attack/malicious scanning detected	Web App Attack
🇺🇸 TPI-Abuse	2026-08-28 13:12:30 UTC · (2 months ago)	(mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:12:26.043710 2026] [security2:error] [pid 20401:tid ... show more (mod_security) mod_security (id:210492) triggered by 34.185.138.38 (38.138.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: ; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 09:12:26.043710 2026] [security2:error] [pid 20401:tid 20401] [client 34.185.138.38:44436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tour.bookingsouthafrica.com"] [uri "/htdocs/.git/config"] [unique_id "apGJOsUrAaw5jZHmiyES9AAAACM"] show less	Brute-Force Bad Web Bot Web App Attack
🇿🇦 conure.sh	2026-08-28 11:12:46 UTC · (2 months ago)	csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s	Web App Attack

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown

Recently Reported IPs:

🇫🇷 185.194.178.35

🇩🇪 167.94.145.26

🇨🇳 118.196.27.115

🇫🇷 91.231.89.160

🇻🇪 91.109.163.16

🇺🇸 74.103.162.45

🇺🇸 40.223.143.175

🇧🇷 191.7.159.201

🇻🇳 183.80.214.28

🇧🇷 151.247.145.224

🇧🇷 151.247.145.212

🇸🇬 138.199.60.20

🇳🇱 86.38.187.251

🇺🇸 68.183.173.55

🇮🇱 35.252.25.151

🇳🇱 195.178.110.78

🇺🇸 107.22.114.207

🇰🇷 101.33.68.140

🇺🇦 95.47.115.108

🇷🇺 91.202.233.48